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METHOD AND APPARATUS FOR ADDRESS ALLOCATION IN GPRS 
NETWORKS THAT FACILITATES END-TO-END SECURITY 

BACKGROUND OF THE INVENTION 

Field of the Invention 

[01] The invention relates to General Packet Radio System (GPRS) and GPRS-based 
networks. More particularly, the present invention relates to a method and system 
that assigns a network address to a mobile station in a GPRS network or a GPRS- 
based network. 

Background of the Invention 

[02] IPv4 is the version of IP (Internet Protocol) that is currently deployed in enterprise 
networks, as well as the public Internet. One of the limitations of IPv4 is that it has a 
limited address space. Consequently, in order to conserve addresses, enterprises and 
other administrative domains (ADs) have resorted to using private addresses. Private 
addresses are network addresses in which the IP address falls within the ranges of 

[10.0.0.0- 10.255.255.255], 

[172.16.0.0 - 172.31.255.255], or 

[192.168.0.0 - 192.168.255.255]. 

[03] Private addresses that are assigned by an administrative entity within an 
administrative domain have relevance only within the administrative domain. 
Accordingly, such private addresses must not be visible outside the administrative 
domain. An advantage of using private addresses is that different administrative 
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domains may assign the same private IP address to hosts within their respective 
administrative domains without any concern of conflict. On the other hand, a 
Network Address Translator (NAT) is used when a host that is assigned a private 
address within an administrative domain intends to send an IP datagram to a host that 
is outside the administrative domain of the sending host. A NAT transforms a 
private IP address (and possibly other selected fields within the datagram) into a 
public IP address prior to the IP datagram being sent outside the administrative 
domain associated with the NAT. Similarly, when an IP datagram is sent from a host 
that is outside the administrative domain associated with the NAT to a host with a 
private address, then the NAT transforms a public IP address to a private address. 

[04] Figure 1 depicts two administrative domains 101 and 102 that are separated by a 
NAT 103. Domain 101 is a private administrative domain, while domain 102 is a 
public administrative domain, such as the Internet. Private domain 101 includes a 
plurality of IP (Internet Protocol) devices 104, 105 and 106 that each provide 
functionality that includes host and/or client and/or server functionality in a well- 
known manner. Public domain 102 also includes a plurality of IP devices, of which 
only IP device 107 is shown. Each IP device of public domain 102 provides 
functionality that includes host and/or client and/or server functionality in a well- 
known manner. It should be understood that both domains 101 and 102 could 
include any number of IP devices that are not shown in Figure 1 . As used herein, the 
term "IP device" is a network device that provides at least host and/or client and/or 
server functionality in a well-known manner. 

[05] To illustrate a conventional NAT-based address assignment operation, consider a 
situation in which IP device 104 within private domain 101 intends to send a 
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datagram to IP device 107 in public domain 102. IP device 104 sends the datagram 
to IP device 107. NAT 103 intercepts the datagram and translates the address 
contained in the datagram to a valid address in the public address space. NAT 103 
then forwards the datagram containing the translated address to IP device 1 07. When 
IP device 107 sends a return (or an initial) datagram to IP device 104, NAT 103 
receives the datagram containing a "public" address for IP device 104, translates the 
address to a corresponding private address in private domain 101, and forwards the 
datagram to IP device 104. 

[06] Use of private addresses within an administrative domain and use of a NAT at the 
edge of an administrative domain has been widely adopted and deployed within 
enterprises. There are, however, two maj or drawbacks associated with use of a NAT. 
The first major drawback is that the NAT-based approach breaks the end-to-end 
security model by changing the destination address of a datagram and thereby 
invalidating the authentication header of the datagram. The second major drawback 
is that certain types of applications cannot work in the presence of a NAT, unless 
remedial measures are taken, such as the inclusion of an application gateway (proxy). 
For example, when an IP address is embedded into an application protocol data unit 
(PDU), an ALG (Application Level Gateway) is required so that the embedded IP 
address is changed because a conventional NAT-based address assignment operation 
will not change the embedded IP address. 

[07] In order to overcome the disadvantages associated with NATs, i.e., the security break 
and the Unfriendliness" toward some applications, a mechanism commonly referred 
to as Realm Specific IP (RSIP) has gained significant support within the Internet 
Engineering Task Force (IETF). 
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[08] According to RSIP, when a host (i.e., an RSIP client) needs an IP address assigned, 
the host indicates to an RSIP server that is responsible for assigning IP addresses 
whether the desired IP address is needed for communicating with a IP device within 
the administrative domain of the requesting host, or is needed for communicating 
with a host/client outside the administrative domain of the requesting host. Based on 
the nature of the request, the RSIP server assigns a private IP address or a public IP 
address to the requesting host. 

[09] Figure 2a depicts two administrative domains 201 and 202 that are separated by an 
RSIP server 203 . Domain 201 is a private administrative domain, while domain 202 
is a public administrative domain, such as the Internet. Private domain 201 includes 
a plurality of IP devices, of which only IP device 204 is shown. IP device 204 
provides functionality that includes host and/or client and/or server functionality in a 
well-known manner. Public domain 202 also includes a plurality of IP devices, of 
which only IP device 205 is shown. Each IP device of public domain 202 provides 
functionality that includes host and/or client and/or server functionality in a well- 
known manner. It should be understood that both domains 201 and 202 could 
include any number of IP devices that are not shown in Figure 2a. 

[10] When IP device 204 desires to send a datagram to IP device 205, IP device 204 sends 
a datagram 206a (Figure 2b) to RSIP server 203 containing an outer IP header 207, 
an inner IP header 208 and a payload 209. Outer IP header 207 contains the private 
address (i.e., A.l) for IP device 204 in a source (Src) field, and the private address 
(i.e., A.5) for RSIP server 203 in a destination (Dst) field. Inner IP header 208 
contains the public address (B.2) that the RSIP server assigns device 204 in an src 
field, and the public address (B.20) for IP device 205 in a Dst field. RSIP server 203 
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removes the outer IP header and sends datagram 206b (Figure 2b) to IP device 205 
using the public address (B.20) for IP device 205 in a Dst field and the public address 
(B.2) for IP device 204 in an Src field. 

[11] When IP device 205 sends a datagram to IP device 204, IP device 205 sends a 
datagram containing the public address (B.20) for IP device 205 in an Src field and 
the public address (B.2) for IP device 204 in a Dst field. RSIP server 203 
encapsulates the received datagram using an outer IP header containing a private 
address (A. 1) for IP device 204 in a Dst field and the private address (A.5) for RSIP 
server 203 in an Src field. 

[12] Thus, when a private IP address is assigned to a requesting host, the IP datagram does 
not leave the administrative domain. When an IP datagram leaves an administrative 
domain, the address that is assigned to the transmitting host is a public IP address. 
Consequently, the RSP protocol makes use of a NAT unnecessary, and thereby 
avoids the drawbacks involving NATs. 

[13] In the case of a General Packet Radio System (GPRS) network or a GPRS-based 
network (such as a Universal Mobile Telecommunications System (UMTS)), a 
Mobile Station (MS) is assigned an IP address by a Gateway GPRS Support Node 
(GGSN). Currently, such an IP address is an IPv4 address. The protocol that is used 
for address assignment is specific to GPRS networks and is referred to as PDP 
Context Activation. PDP (Packet Data Protocol) is an acronym that is used within 
GPRS networks to refer to IP addresses, X.25 addresses, etc. An administrative 
domain within GPRS networks (and within cellular networks, in general) is referred 
to as a PLMN (Public Land Mobile Network). 
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[14] Figure 3 shows generic GPRS protocol stacks for a mobile station (MS), base station 
subsystem (BSS), Serving GPRS Support Node (SGSN) and the Gateway GPRS 
Support Node (GGSN). The EP address for the MS maybe seen on the protocol stack 
for the MS. 

Figures 4a-4d illustrate a conventional PDP (Packet Data Protocol) context activation 
sequence within a GPRS network. During the first step of a conventional PDP 
context activation shown in Figure 4a, an MS sends an Activate PDP Context 
Request message to an SGSN through a BSS. The Activate PDP Context Request 
message contains appropriate information in the NS API, PDP type, PDP Addr, APN, 
QoS Req, and PDP Config Options in a well-known manner. In Figure 4b, the SGSN 
sends a Create PDP Context Request message to a GGSN containing appropriate 
information in the PDP Type, PDP Addr, APN, QoS Negotiated, TID, Selection 
Mode, PDP Config Options fields. In Figure 4c, the GGSN sends a Create PDP 
Context Response message to the SGSN containing appropriate information in the 
TID, PDP Addr, BB Protocol, Reordering Reqd, QoS Negot, PDP Config Options 
and Cause fields. In Figure 4d, the SGSN then sends an Activate PDP Context 
Accept message to the MS containing appropriate information in the NSAPI, PDP 
Type, PDP Addr, QoS Req, Radio Priority Level and PDP Config Options field. 

[16] Nevertheless, the GPRS standard does not specify whether private or public IP 
addresses are assigned to a requesting MS. Address assignment is not a 
standardization issue because a NAT is currently used at a PLMN boundary when 
private IP addresses are used. That is, current GPRS deployments rely on NATs at 
the GGSN when private addresses are assigned to a requesting MS. While this 
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handles the problem of conserving IPv4 addresses, end-to-end security or application 
friendliness is not provided. 

[17] Even though a conventional PDP context activation procedure within a GPRS 
network assigns an IPv4 address to a mobile station, what is needed is a technique for 
assigning an IPv4 address to a mobile station in a GPRS network or a GPRS-based 
network that conserves IPv4 addresses and simultaneously maintains end-to-end 
security and application friendliness. 

BRIEF SUMMARY OF THE INVENTION 

[18] The present invention provides a technique for assigning an IPv4 address to amobile 
station in a GPRS or a GPRS-based network that conserves IPv4 addresses and 
simultaneously maintains end-to-end security and application friendliness. The 
present invention also provides a technique for assigning an IPv6 address to amobile 
station in a GPRS or a GPRS-based network that conserves IPv6 addresses and 
simultaneously maintains end-to-end security and application friendliness. 

[19] The advantages of the present invention are provided by a General Packet Radio 
System (GPRS) communications network that includes a Serving GPRS Support 
Node (SGSN) and a Gateway GPRS Support Node (GGSN). The SGSN receives an 
Activate Packet Data Protocol (PDP) Context Request message from a mobile station 
of the GPRS communications network. The Activate PDP Context Request message 
has an APN field that contains information relating to a request for one of a private 
network address and a public network address. The SGSN sends a Create PDP 
Context Request message to the GGSN in response to the Activate PDP Protocol 
Context Request. The Create PDP Context Request message has an APN field that 
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contains information relating to a request for one of a private network address and a 
public network address. The GGSN assigns one of a private network address and a 
public network address to the mobile station in response to the Create PDP Context 
Request message, and sends a Create PDP Context Response message to the SGSN 
containing the information assigning one of a private network address and a public 
network address to the mobile station. In turn, the SGSN sends an Activate PDP 
Context Accept message to the mobile station in response to the Create PDP Context 
Response message. The Activate PDP Context Accept message contains information 
assigning one of a private network address and a public network address to the 
mobile station based on the information contained in the APN field of the Activate 
PDP Context Request message. 

[20] According to another aspect of the invention, a GPRS-based communications 
network includes an SGSN, a (GGSN) and a Border Gateway (BG). The SGSN 
receives an Activate Packet Data Protocol (PDP) Context Request message from a 
mobile station of the GPRS-based communications network, such that the Activate 
PDP Context Request message has an APN field containing information relating to a 
request for one of a private network address and a public network address. The 
SGSN sends a Create PDP Context Request message from the SGSN to the BG in 
response to the Activate PDP Protocol Context Request. Accordingly, the Create 
PDP Context Request message has an APN field containing information relating to a 
request for one of a private network address and a public network address. The BG 
assigns one of a private network address and a public network address to the mobile 
station in response to the Create PDP Context Request message, and sends a Create 
PDP Context Response message from the BG to the SGSN containing the 
information assigning one of a private network address and a public network address 
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to the mobile station based on the information contained in the APN field of the 
Create PDP Context Request message. The SGSN the sends an Activate PDP 
Context Accept message to the mobile station in response to the Create PDP Context 
Response message, such that the Activate PDP Context Accept message contains 
information assigning one of a private network address and a public network address 
to the mobile station based on the information contained in the APN field of the 
Activate PDP Context Request message. Alternatively, the SGSN sends the Create 
PDP Context Request message from the SGSN to the GGSN in response to the 
Activate PDP Protocol Context Request, and the GGSN sends the Create PDP 
Context Request message from the GGSN to the BG. Accordingly, the BG sends the 
Create PDP Context Response message from the BG to the GGSN and the GGSN 
sends the Create PDP Context Response message to from the GGSN to the SGSN. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[21] The present invention is illustrated by way of example and not by way of limitation in 
the accompanying figures in which like reference numerals indicate similar elements 
and in which: 

[22] Figure 1 depicts a private administrative domain and a public administrative domain 
that are separated by a NAT for illustrating a conventional NAT-based address 
assignment operation; 

[23] Figure 2a depicts a private administrative domain and a public administrative domain 
that are separated by an RSIP server for illustrating a conventional RSIP-based 
address assignment operation; 
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[24] Figure 2b depicts a datagram within an RSIP-based system; 

[25] Figure 3 shows conventional generic GPRS protocol stacks for a mobile station 
(MS), base station subsystem (BSS), Serving GPRS Support Node (SGSN) and the 
Gateway GPRS Support Node (GGSN); 

[26] Figures 4a-4d illustrate a conventional PDP (Packet Data Protocol) context activation 
sequence within a GPRS network; 

[27] Figure 5 shows a GPRS network arrangement providing RSIP server functionality 
according to the present invention; and 

[28] Figure 6 shows a PLMN administrative domain for illustrating the process of an 
SGSN selecting a GGSN according to the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

[29] The present invention provides an RSIP -type technique that is used for assigning a 
network address to a mobile station in a GPRS network or a GPRS-based network 
(e.g., Universal Mobile Telecommunications System (UMTS)) that conserves IPv4 
addresses and simultaneously maintains end-to-end security and application 
friendliness. Because the present invention relates to both IPv4 and IPv6 addresses, 
the term PDP, as used herein, is intended to be synonymous with both IPv4 and IPv6 
addresses. 

[30] Figure 5 shows a GPRS network arrangement 500 providing RSIP functionality, and 
thereby provides the RSIP protocol for IPv4 and for IPv6 address assignment 
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according to the present invention. It should be understood that GPRS network 
arrangement 500 can also be a GPRS-based network, such as UMTS. GPRS network 
arrangement 500 includes a public land mobile network (PLMN) administrative 
domain 501 and a PLMN administrative domain 502 that are coupled together 
through a packet data network 503, such as the Internet, and an inter-PLMN 
backbone network 504. A mobile station (MS) 2 is coupled to packet data network 
503 in a well-known manner. Packet data network 503 provides a public address 
space, and inter-PLMN backbone network 504 provides a public address 
space/common private address space. PLMN 501 includes a Gateway GPRS Support 
Node (GGSN) 505, a Border Gateway (BG) 506, an intra-PLMN backbone 507 
providing a private address space, a Serving GPRS Support Node (SGSN) 508, and 
an SGSN 509. An MS 1 is coupled to SGSN 508 in a well-known manner. While 
only one GGSN, one BG, and two SGSNs are shown as part of PLMN administrative 
domain 501, it should be understood that PLMN 501 could include any number of 
GGSNs, BGs and SGSNs. Moreover, while only a single MS 1 is shown in Figure 5 
as being associated with PLMN administrative domain 501 and a single MS 2 as 
being associated with packet data network 503, it should be understood that a 
plurality of MSs could be coupled to any of the SGSNs of PLMN administrative 
domain 501 and with packet data network 503. 

[31] PLMN 502 includes a GGSN 510, a BG 511, an intra-PLMN backbone 512 
providing a private address space, and an SGSN 513. An MS 3 is coupled to SGSN 
513 in a well-known manner. While only one GGSN, one BG, and one SGSN are 
shown as part of PLMN administrative domain 502, it should be understood that 
PLMN 502 could include any number of GGSNs, BGs and SGSNs. Additionally, 
while only a single MS 3 is shown in Figure 5 as being associated with PLMN 
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administrative domain 502, it should be understood that a plurality of MSs could be 
coupled to any of the SGSNs of PLMN administrative domain 502. It should also be 
understood that GPRS network arrangement 500 could include any number of PLMN 
administrative domains. 

[32] According to one embodiment of the invention, RSIP client functionality is provided 
at the SGSNs and the GGSNs, but is not needed at the MS or at the BGs. Further, 
RSIP server functionality is provided at GGSNs and BGs, but is not needed either at 
the MS or at the SGSNs. 

[33] For example, when MS 1 within PLMN 501 intends to communicate with MS 2 
within public data network 503 (e.g., the Internet), MS 1 needs to use a public IP 
address to communicate with MS 2 because MS 2 has a public IP address. When a 
public IP address has not already been assigned to MS 1 , MS 1 sends an Activate PDP 
Context Request message to SGSN 508, similar to Figure 4. The APN field in the Activate 
PDP Context Request message indicates that a public IP address is desired. Upon receiving 
the Activate PDP Context Request message having the APN field set, SGSN 508 initiates an 
RSIP Request message requesting an assignment of a public address. When GGSN 505 
receives the RSIP Request message, GGSN 505, operating as an RSIP server, returns a 
suitable RSIP Response message containing the public IP address corresponding to the 
request from MS 1 . When SGSN 508 receives the RSIP Response message from GGSN 505, 
SGSN 508 sends an Activate PDP Context Accept message to MS 1 containing the assigned 
public IP address. 

[34] Another example is when MS 1 within PLMN 501 intends to communicate with 
MS 3 within PLMN 502 through Inter-PLMN backbone 503. Inter-PLMN backbone 
503 uses an address space that may either be private or public. Consequently, the 
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address space used by Inter-PLMN backbone 503 for this example will be referred to 
as X. Thus, MS 1 needs to be assigned an IP address from address space X. MS 1 
sends an Activate PDP Context Request message to SGSN 508, The APN field of 
the Activate PDP Context Request message indicates that an DP address from address 
space X is desired. Upon receiving the Activate PDP Context Request message 
having the APN field set, SGSN 508 can respond in one of two ways. First, SGSN 
508, acting as an RSIP client, can send an RSIP request message to GGSN 505, 
which would be acting as an RSIP server. GGSN 505, acting as an RSIP client, then 
would send an RSIP request message to BG 506, which would be acting as an RSIP 
server. The response then traces its way back from BG 506 to GGSN 505 to SGSN 
508. Alternatively, SGSN 508, acting as an RSIP client, would send an RSIP request 
message directly to BG 506, which would be acting as an RSIP server. SGSN 508 
then receives a suitable RSIP response from BG 506. In either situation, SGSN 508 
sends an appropriate Activate PDP Context Accept message to MS 1 that contains the IP 
address assigned upon receiving the RSIP response. 

[35] According to a second embodiment of the present invention, one of the fields in the 
Activate PDP Context Request message that is sent from the MS to the SGSN is the 
Access Point Name (APN) field. As previously mentioned, the current GPRS 
standard for assigning IPv4 addresses does not disclose a private or public IP address 
assignment to a requesting MS. In contrast, the present invention provides an MS 
that utilizes the APN field of the Activate PDP Context Request message as an 
extensible field by inserting information into the APN field for requesting either a 
public or a private address assignment. Moreover, the inserted information relating 
to whether a public or a private address assignment is desired can be an explicit 
indication, such as a particular bit (or bits) of the APN field being set, or implicit by 
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the address of a GGSN contained in the APN field. When the indication is implicit, 
the SGSN determines the desired address assignment (public or private) based on the 
indicated GGSN. When the indicated GGSN interfaces to a public administrative 
domain, then the desired address is a public address. Conversely, when the indicated 
GGSN interfaces with a private administrative domain, then the desired address is a 
private address. 

[36] An SGSN then uses the information contained in the APN field for selecting a 
suitable GGSN for sending the Create PDP Context Request message. The Create 
PDP Context Request message sent from the SGSN to the selected GGSN 
transparently contains the APN field that was used within the Activate PDP Context 
Request message that was sent from the requesting MS to the SGSN. 

[37] Figure 6 shows a PLMN administrative domain 600 for illustrating the process of an 
SGSN selecting a GGSN according to the present invention. PLMN administrative 
domain 600 is coupled to three different administrative domains 601, 602 and 603 
through GGSNs 604, 605 and 606, respectively, in a well-known manner. 
Administrative domains 601, 602 and 603 can be private or public administrative 
domains. PLMN administrative domain 600 also includes a Radio Access Network 
(RAN) 607 that is coupled to a core network 608 through an SGSN 609 in a well- 
known manner. GGSNs 604, 605 and 606 are each coupled to core network 609 in a 
well-known manner. Depending on the information contained in the APN field in the 
Activate PDP Context Request message that is sent from a requesting MS to SGSN 
609, SGSN 609 selects a suitable GGSN (i.e., one of GGSN 604, GGSN 605 or 
GGSN 606). The Create PDP Context Request message is then sent from SGSN 609 
to the selected GGSN. 
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[38] According to one embodiment of the present invention, a requesting MS indicates a 
preference for a private or a public address that is known to a GGSN using 
information contained in the APN field of a Create PDP Context Request message. 
Subsequently, the appropriate GGSN uses the information contained in the APN field 
for assigning a private address or a public address to the requesting MS. 

[39] Referring to Figure 5 to illustrate another aspect of the present invention in which 
mobility is not a factor, consider the situation of a datagram having an outer IP 
header and that is sent between an SGSN and a GGSN of the same PLMN, for 
example, PLMN 501 . In such a situation, private addresses can always be used and, 
consequently, RSIP client or server functionality is not needed within any GPRS 
network element. 

[40] In the situation that the outer IP header of a datagram that is sent between an SGSN 
and GGSN in which SGSN and GGSN belong to different PLMNs, for example, 
when SGSN 508, which is part of PLMN 501, and GGSN 510, which is part of 
PLMN 501, two pairs of RSIP client-server functionality are required. For the first 
pair of RSIP client-server functionality, the RSIP client is located at SGSN 508 and 
an RSIP server is located at BG 506 in PLMN 501. For the second pair of RSIP 
client-server functionality, an RSIP client located at GGSN 510 and an RSIP server 
located at BG 51 1 in PLMN 502. 

[41] In the situation of a datagram having an inner IP header, an RSIP client is located at 
the SGSN and an RSIP server is located at the GGSN, regardless whether the GGSN 
and the SGSN are within the same PLMN or are in different PLMNs. 
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[42] Again referring to Figure 5 to illustrate yet another aspect of the present invention in 
which mobility is a factor, consider the situation in which a requesting MS that is 
associated with SGSN 513, such as MS 3, moves to a different location and is 
subsequently associated with, for example, SGSN 508. In this situation, consider the 
GGSN to be GGSN 510 and consider the outer IP header of a datagram. For this 
situation, two pairs of RSIP client-server functionality are required. For the first pair 
of RSIP client-server functionality, an RSIP client is located at SGSN 508 and an 
RSIP server located at BG 506. For the second pair of RSIP client-server 
functionality, an RSIP client is located at GGSN 51 0 and an RSIP server located at 
BG 5 1 1 . This situation is identical to the situation without mobility because the outer 
IP header of the datagram is being used. 

[43] For the same scenario, now consider the inner IP header. In this situation, three pairs 
of RSIP client server functionalities are required. For the first RSIP client-server 
functionality, an RSIP client located at SGSN 513 and an RSIP server is located at 
GGSN 510. For the second RSIP client server functionality, an RSIP client is located 
at GGSN 510 and an RSIP server is located at BG 511. For the third RSIP client 
server functionality, an RSIP client is located at SGSN 508 and an RSIP server is 
located at GGSN 505. 

[44] While the invention has been described with respect to specific examples including 
presently preferred modes of carrying out the invention, those skilled in the art will 
appreciate that there are numerous variations and permutations of the above 
described systems and techniques that fall within the spirit and scope of the invention 
as set forth in the appended claims. 



16 



NC 17391 
B&W 5288.00014 

THE CLAIMS 

What is claimed is: 

1 . A General Packet Radio System (GPRS) -based communications network 
comprising: 

a Serving GPRS Support Node (SGSN) receiving an Activate Packet Data 
Protocol (PDP) Context Request message from a mobile station of the GPRS-based 
communications network, the Activate PDP Context Request message having an APN field 
containing information relating to a request for one of a private network address and a public 
network address; and 

a Gateway GPRS Support Node (GGSN) of the GPRS-based communications 

network, 

the SGSN sending a Create PDP Context Request message from the SGSN to 
the GGSN in response to the Activate PDP Protocol Context Request, the Create PDP 
Context Request message having an APN field containing information relating to a request 
for one of a private network address and a public network address, 

the GGSN assigning one of a private network address and a public network 
address to the mobile station in response to the Create PDP Context Request message, and 
sending a Create PDP Context Response message from the GGSN to the SGSN containing 
the information assigning one of a private network address and a public network address to 
the mobile station based on the information contained in the APN field of the Create PDP 
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